Privacy Policy

Last updated: 10 October 2026

1. Who we are

The Gentle Coach is a mobile wellness application developed and operated by The Gentle Coach ("we", "us", "our"). You can reach us at hello@gentlecoach.app.

2. What this policy covers

This Privacy Policy explains how we collect, use, store, and protect information when you use The Gentle Coach app on iOS or Android, and when you visit our website at gentlecoach.app (see section 7). By using the app, you agree to the practices described here.

3. Information we collect

We collect the following information when you create an account and use The Gentle Coach:

Account information

• Your name or display name
• Your email address
• Your password (stored securely — we never see it in plain text)

App usage data

• Urge logs and check-in entries you create
• Your daily plan content and habit data
• Reflections and notes you write in the app
• Messages you send in coaching conversations, and the coach's replies
• Timestamps of when you use the app

Device data

• Push notification tokens (used only to send you notifications you have opted into)
• Device type and operating system version (used to ensure the app works correctly)

We do not collect your precise location, contacts, camera, microphone, or any other device data beyond what is listed above.

4. How we use your information

We use the information we collect to:

• Create and manage your account
• Provide the core features of the app — urge logging, plan management, reflections, and pattern insights
• Generate coaching replies and check-in notes (see OpenAI in section 6)
• Send you push notifications you have opted into (such as plan reminders)
• Improve the app based on usage patterns
• Respond to your support requests
• Comply with our legal obligations

We do not use your data to serve advertising. We do not build advertising profiles. We do not sell your data to anyone.

5. How we store your data

Your data is stored securely using Supabase, a trusted backend platform. Data is encrypted in transit (TLS) and at rest. Supabase's infrastructure is hosted on AWS and complies with industry-standard security practices.

Your personal wellness data (urge logs, check-ins, reflections) is stored in your account and is treated as private and confidential. Access is limited to what's needed to operate and support the app — for example, to investigate a bug you've reported — and is never used to judge or diagnose you. It is not shared with anyone except the service providers described in section 6, and only so they can provide their part of the app.

6. Third-party services

The Gentle Coach uses the following third-party services:

• Supabase — authentication, database, and real-time data. Supabase Privacy Policy
• Expo / EAS — used to build and deliver the app. Expo Privacy Policy
• OpenAI — generates the coach's replies in the app's coaching conversations (including "Talk it through" reflections) and the coach notes after a daily check-in. OpenAI Privacy Policy

How we use OpenAI

When you use a coaching conversation or complete a check-in, our server sends OpenAI the information needed to write a reply:

• The message you have just written, and up to the six most recent messages in that conversation (yours and the coach's)
• Context from your profile: your goal, main trigger, when eating usually happens, your eating state, dietary preferences and preferred coaching style
• For check-in notes: that day's energy and stress ratings, how you felt about food, any focus or note you wrote, and a short summary of your recent check-ins

We do not include your name or email address in these requests. They are sent from our server rather than your device, so OpenAI does not receive your device's IP address. Because you choose what to write, your messages may include personal or sensitive details — please only share what you're comfortable with.

Requests are sent over an encrypted connection. OpenAI states that it does not use data sent through its API to train its models unless the customer opts in, and that it may keep API data for up to 30 days to provide the service and detect abuse, unless it is legally required to keep it longer. OpenAI may process data in the United States. Coaching messages saved to your account are stored in our database in encrypted form.

Coach replies are generated automatically. They can be wrong or incomplete and are not medical advice.

The app does not use any third-party analytics, advertising SDKs, or crash reporting tools that share your data externally. Our website uses Google Analytics only if you agree to it — see section 7.

7. Our website: analytics, cookies and email sign-ups

This section applies to our website, gentlecoach.app. It does not apply to the app.

Google Analytics (only with your consent)

If you choose "Accept" on our cookie banner, we use Google Analytics 4, provided by Google, to understand how visitors use our website — for example, which pages are visited, how people arrive (such as from a search engine or a social media link), and roughly which country or region visits come from. We use this only to improve the website and its content. We have turned off Google signals and ad personalisation, and we do not use Google Analytics for advertising.

Google Analytics sets first-party cookies named _ga and _ga_Q0ENLKMH6Z. They hold a random identifier so that visits can be counted, and they last for up to two years unless you clear them or withdraw consent. Google Analytics collects information such as the pages you view, the website that referred you, your approximate location (derived from your IP address — Google states that Google Analytics 4 does not log or store IP addresses), and your device type, browser and operating system. Google processes this data on our behalf and may process it on servers outside the UK and EU. Google Analytics deletes visitor-level data after the retention period set in our account, which is at most 14 months; aggregated reports that do not identify individual visitors may be kept longer. You can read how Google uses information from sites that use its services.

If you choose "Decline", or don't make a choice, Google Analytics is not loaded and no Google Analytics cookies are set.

Changing your choice

You can change your choice at any time using the "Cookie settings" link at the bottom of every page, or change your cookie settings now. If you withdraw consent, we stop loading Google Analytics and delete its cookies from your browser where we can. Your choice is saved in your browser's local storage so we don't ask on every page; clearing your browser data resets it.

Website hosting and Vercel Web Analytics

Our website is hosted by Vercel, which processes technical information such as your IP address and browser details in order to deliver web pages. We also use Vercel Web Analytics to measure overall website traffic. It does not use cookies. It records information such as the page visited, the referring website, your country, and your browser, operating system and device type, along with a small number of button clicks (such as "Get the free 7-day reset" and app store links). Vercel states that, to count visits, it derives a temporary identifier from the request that is discarded after 24 hours. We do not send your name or email address to Vercel Web Analytics. Vercel Privacy Policy

Evening Reset emails (Brevo)

Signing up for the free 7-Day Evening Eating Reset is voluntary, and you don't need to sign up to use the website or the app. If you do, we collect your email address and use Brevo, our email provider, to store it on our mailing list and to send you a confirmation email and the reset emails. You're only added to the list after you click the link in the confirmation email. Brevo may record whether our emails are delivered, opened and clicked, which helps us understand whether they're useful.

Every email includes an unsubscribe link, and you can unsubscribe at any time. To have your email address deleted, contact us at hello@gentlecoach.app. Brevo Privacy Policy

Legal basis

We use Google Analytics and send Evening Reset emails on the basis of your consent. We use Vercel Web Analytics on the basis of our legitimate interest in understanding, in aggregate, how our website is used.

8. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data will be deleted from our systems within 30 days, except where we are required by law to retain it.

9. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Request a copy of your data (we'll provide this within 14 days of your request)
• Withdraw consent at any time (by deleting your account; for website analytics, by using "Cookie settings" at the bottom of any page; or for Evening Reset emails, by unsubscribing)

To exercise any of these rights, contact us at hello@gentlecoach.app.

10. Children's privacy

The Gentle Coach is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. A note about sensitive wellness data

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you via the app or email if the changes are material. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact us